In the final rule, the federal agency dropped a proposed 2% return on equity from the incentives utilities can get for certain cyber investments.